Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: can't join domain (with new directory admin account)



Daniel Wittenberg wrote:


Thanks for the info, but seems I've still got problems. I ran this command and get the following response:

[0]set_opendirectory_authenticator
opendirectorypdbconfig error(0)

Not sure exactly what this means, but if I view -b the opendirectorysam file it looks like it embeds the username and password in clear text (yippee). But when I go back to Windows and try to join I still get Access Denied. Looking at the samba log I noticed a couple errors that I'm not sure what they are and couldn't find any info on:

samr_io_userinfo_ctr: unknown switch level 0x1a
api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.
decode_pw_buffer: incorrect password length (89613549).
decode_pw_buffer: check that 'encrypt passwords = yes'

Which I did double-check and encrypt is set to yes.

  Ulp...I haven't encountered this....looks like some length
  field in /var/db/samba/opendirectorysam got set wrong and
  so junk gets passed onward and the auth fails.

  Here's an 'xxd' dump of mine (suitably obfuscated) to compare to:
   # xxd opendirectorysam
     0000000: 6f64 7361 0000 0008 0000 0008 0000 0000  odsa............
     0000010: xxxx xxxx xxxx xxxx yyyy yyyy yyyy yyyy  xxxxxxxxyyyyyyyy

  where "xx" are characters in the userid and "yy" are in the password.
  They were both 8 chars so I can't tell you which of like length fields
  on the first line is which.


_______________________________________________ Do not post admin requests to the list. They will be ignored. Macos-x-server mailing list (email@hidden) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden


Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.